Failed to verify operator role for addons requiring additional credential requests for sts clusters #970
Description
When installing the RHOAM addon, it takes several runs of the install addon command to correctly apply the addon onto a ROSA sts cluster.
Below is a sample output (aws account id has been redacted):
➜ ~ rosa install addon --cluster chfan-sts managed-api-service -y --rosa-cli-required true --cidr-range 10.1.0.0/26 --notification-email [email protected] --addon-managed-api-service 1 --addon-resource-required true -
W: Addon 'managed-api-service' needs access to resources in account '0124567910'
I: Created role 'chfan-sts-y8x4-redhat-rhoam-cloud-resources-operator-sts-credent' with ARN 'arn:aws:iam::0124567910:role/chfan-sts-y8x4-redhat-rhoam-cloud-resources-operator-sts-credent'
E: Failed to add operator role to cluster 'chfan-sts': Failed to verify operator role for cluster '20jnic2pu9seuitl5ta0frmc8evn1tc9'
➜ ~ rosa install addon --cluster chfan-sts managed-api-service -y --rosa-cli-required true --cidr-range 10.1.0.0/26 --notification-email [email protected] --addon-managed-api-service 1 --addon-resource-required true --s3-access-key-id s3-key --s3-secret-access-key s3-secret
W: Addon 'managed-api-service' needs access to resources in account '0124567910'
E: Failed to add operator role to cluster 'chfan-sts': Failed to verify operator role for cluster '20jnic2pu9seuitl5ta0frmc8evn1tc9'
➜ ~ rosa install addon --cluster chfan-sts managed-api-service -y --rosa-cli-required true --cidr-range 10.1.0.0/26 --notification-email [email protected] --addon-managed-api-service 1 --addon-resource-required true
W: Addon 'managed-api-service' needs access to resources in account '0124567910'
I: Created role 'chfan-sts-y8x4-redhat-rhoam-3scale-sts-s3-credentials' with ARN 'arn:aws:iam::0124567910:role/chfan-sts-y8x4-redhat-rhoam-3scale-sts-s3-credentials'
E: Failed to add operator role to cluster 'chfan-sts': Failed to verify operator role for cluster '20jnic2pu9seuitl5ta0frmc8evn1tc9'
➜ ~ rosa install addon --cluster chfan-sts managed-api-service -y --rosa-cli-required true --cidr-range 10.1.0.0/26 --notification-email [email protected] --addon-managed-api-service 1 --addon-resource-required true
W: Addon 'managed-api-service' needs access to resources in account '0124567910'
E: Failed to add operator role to cluster 'chfan-sts': Failed to verify operator role for cluster '20jnic2pu9seuitl5ta0frmc8evn1tc9'
➜ ~ rosa install addon --cluster chfan-sts managed-api-service -y --rosa-cli-required true --cidr-range 10.1.0.0/26 --notification-email [email protected] --addon-managed-api-service 1 --addon-resource-required true -
W: Addon 'managed-api-service' needs access to resources in account '0124567910'
I: Enabling interactive mode
? Billing Model: standard
I: Add-on 'managed-api-service' is now installing. To check the status run 'rosa list addons -c chfan-sts'
I: To install this addOn again in the future, you can run:
rosa install addon --cluster chfan-sts managed-api-service -y --rosa-cli-required true --cidr-range 10.1.0.0/26 --notification-email [email protected] --addon-managed-api-service 1 --addon-resource-required true --billing-model standard
It seems there is a delay between adding the required addon credenital requests and being available on the cluster api which fails some sort of validation.
This occurs on even the latest rosa version - 1.2.10 (at the time of writing) and is not the best user experience since the error looks to be transient